systemvm: Prefer TLS over SSL in apache, POODLE workaround (CVEÂ2014Â3566)
Just prefer TLS over SSL in apache configuration in systemvm Signed-off-by: Rohit Yadav <[email protected]> (cherry picked from commit 88acc9bd53cbf6f8896d32576f916c20704a3403) Signed-off-by: Rohit Yadav <[email protected]> Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/90a9e9a8 Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/90a9e9a8 Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/90a9e9a8 Branch: refs/heads/4.4 Commit: 90a9e9a80932072472072dcc0b89d906db40900d Parents: 8b78785 Author: Rohit Yadav <[email protected]> Authored: Tue Nov 4 01:43:55 2014 +0530 Committer: Rohit Yadav <[email protected]> Committed: Thu Dec 11 19:58:35 2014 +0530 ---------------------------------------------------------------------- systemvm/patches/debian/config/etc/apache2/httpd.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cloudstack/blob/90a9e9a8/systemvm/patches/debian/config/etc/apache2/httpd.conf ---------------------------------------------------------------------- diff --git a/systemvm/patches/debian/config/etc/apache2/httpd.conf b/systemvm/patches/debian/config/etc/apache2/httpd.conf index 0565a8c..2a6b921 100644 --- a/systemvm/patches/debian/config/etc/apache2/httpd.conf +++ b/systemvm/patches/debian/config/etc/apache2/httpd.conf @@ -1,2 +1,2 @@ -SSLProtocol -ALL +SSLv3 +TLSv1 +SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2 SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
